Analysis of the KINS malware

This report analyzes KINS, a ZeuS-derived banking Trojan active since 2011 that targeted financial institutions (notably in Germany and the Netherlands) and was later sold as a kit; it documents technical features including a build-time VM for config decryption, lists associated MD5 hashes, outlines campaign history and geographic focus, and notes user migration to other ZeuS-based kits.